This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json) Hash identifier: ziqmEUTPSEeDvKGOpuzn8VCZd+C2ctTSQZwkbxme02I= Subject key identifier: DD:AD:30:03:15:BC:3F:FC:12:D3:62:55:12:DB:E3:9B:36:2E:86:AC Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a Certificate serial: 019BF876A0643A432FD9D0F320B17F5F8C36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft Manifest number: 6F Signing time: Mon 26 Jan 2026 04:01:22 +0000 Manifest this update: Mon 26 Jan 2026 04:01:22 +0000 Manifest next update: Tue 27 Jan 2026 04:01:22 +0000 Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: OkfDoQo2cR1i9s88zjy80e7I9718SkgXZZFkM0LjJxU=) 2: aRPei__YV55E5LayLWDZlLmCI2M.roa (hash: Cq96j35j1pjMRWQ8I4PQ7Ruzt7oVF+lvmFKi5QfS62o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:a0:64:3a:43:2f:d9:d0:f3:20:b1:7f:5f:8c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a Validity Not Before: Jan 26 04:01:22 2026 GMT Not After : Jan 27 04:01:22 2026 GMT Subject: CN=ddad300315bc3ffc12d3625512dbe39b362e86ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ba:bb:2d:cb:6c:ce:9a:0d:b0:bd:02:9f:cf: 49:43:6c:a4:48:0a:6b:7d:de:c9:1b:2d:e7:c4:67: a1:ef:60:e1:64:6d:07:f9:f6:1d:67:f2:34:3e:a2: e5:ab:43:c9:24:97:c0:74:50:7f:a4:56:fb:dd:bd: f4:b5:f1:9a:84:7d:1a:07:21:b7:d0:1c:72:e1:5c: de:e7:7c:0a:3b:43:7f:a4:3c:47:91:2b:37:8e:46: cf:70:0c:6d:e3:80:9b:7f:f5:b5:e9:b0:20:e3:76: 62:94:d3:3f:02:c2:c6:d3:99:18:93:13:36:4c:c5: be:78:3d:34:12:4a:1e:33:c1:e0:6b:25:c5:03:d9: 45:38:42:da:ab:a2:ec:94:50:0d:23:cf:13:c0:69: 5c:73:f5:a0:a1:0a:f5:bd:9d:8e:49:8d:e0:1f:ed: 65:31:6e:5b:f0:9a:0f:49:bd:a0:3d:cb:f8:03:65: 45:3b:b8:74:cf:45:87:f0:34:a2:b9:70:1b:c1:78: d2:47:01:23:91:82:aa:09:b2:4b:3c:5c:74:46:4d: 63:4e:d2:0b:08:e7:3e:0a:46:10:06:45:c0:95:a8: 85:7b:ea:d5:f0:c8:27:ef:64:e3:3c:0b:5f:ed:2a: 39:ee:10:2f:d5:28:f9:da:96:97:17:56:74:03:6e: e3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AD:30:03:15:BC:3F:FC:12:D3:62:55:12:DB:E3:9B:36:2E:86:AC X509v3 Authority Key Identifier: keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:42:0f:a9:ee:0f:7d:44:2b:a8:9e:ef:f0:ee:44:6a:06:e4: 50:9d:45:13:30:85:69:dd:29:35:97:f2:c2:f7:b0:7e:8b:a9: 25:16:a4:d3:33:6e:3c:87:06:c5:d3:2a:e2:4b:0d:7c:86:6c: ba:1d:0a:a1:b4:4c:f0:d1:3e:02:43:ec:7c:2d:fd:12:c7:44: 62:50:9f:d1:a6:80:e9:4a:78:e3:82:dd:ff:6c:c0:31:1a:e6: 10:83:69:bc:01:6f:90:29:11:5a:95:16:00:76:58:2e:3f:90: 8a:c9:e8:b5:7d:2d:a5:b4:68:29:7c:09:ec:08:75:1a:e4:2e: f8:ce:d4:12:bf:6f:e3:a6:44:2e:f7:fb:fe:f0:b6:3a:bf:a3: e3:38:4e:77:31:1a:e7:7a:e2:df:69:3a:83:f4:93:bc:23:fd: b2:81:34:c4:f4:4f:f7:7f:76:a9:90:8d:e2:ef:d8:c8:a2:91: 89:3e:34:b5:14:54:44:aa:65:b2:b7:a4:52:0f:1f:3a:ae:eb: c7:8d:4f:18:e6:48:75:2d:d5:9e:f3:d5:33:34:c4:e9:8d:f7: 2f:31:43:8a:24:73:42:d9:ef:10:55:c1:7d:35:ce:e6:ce:b3: 80:33:f2:3c:69:03:20:3f:6c:5d:53:6e:e7:f1:8a:1f:05:8d: f9:ec:7a:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dqBkOkMv2dDzILF/X4w2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2Y1ZDkyZGQ3N2I4ZWY3ZWQ2Y2Q1N2NhYWExMGFmZDk4 ZTllNWEwHhcNMjYwMTI2MDQwMTIyWhcNMjYwMTI3MDQwMTIyWjAzMTEwLwYDVQQD EyhkZGFkMzAwMzE1YmMzZmZjMTJkMzYyNTUxMmRiZTM5YjM2MmU4NmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bq7LctszpoNsL0Cn89JQ2ykSApr fd7JGy3nxGeh72DhZG0H+fYdZ/I0PqLlq0PJJJfAdFB/pFb73b30tfGahH0aByG3 0Bxy4Vze53wKO0N/pDxHkSs3jkbPcAxt44Cbf/W16bAg43ZilNM/AsLG05kYkxM2 TMW+eD00EkoeM8HgayXFA9lFOELaq6LslFANI88TwGlcc/WgoQr1vZ2OSY3gH+1l MW5b8JoPSb2gPcv4A2VFO7h0z0WH8DSiuXAbwXjSRwEjkYKqCbJLPFx0Rk1jTtIL COc+CkYQBkXAlaiFe+rV8Mgn72TjPAtf7So57hAv1Sj52paXF1Z0A27j8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2tMAMVvD/8EtNiVRLb45s2LoasMB8GA1UdIwQY MBaAFNHPXZLdd7jvftbNV8qqEK/Zjp5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGM5ZGt0MTN1TzktMXMxWHlxb1FyOW1PbmxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yOTRhMTItMzBlYi00YWViLTk1Yzgt NTAxYTA3MTlkYTBjLzEvMGM5ZGt0MTN1TzktMXMxWHlxb1FyOW1PbmxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8yOTRhMTItMzBlYi00YWViLTk1YzgtNTAxYTA3MTlkYTBj LzEvMGM5ZGt0MTN1TzktMXMxWHlxb1FyOW1PbmxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUIPqe4P fUQrqJ7v8O5EagbkUJ1FEzCFad0pNZfywvewfoupJRak0zNuPIcGxdMq4ksNfIZs uh0KobRM8NE+AkPsfC39EsdEYlCf0aaA6Up444Ld/2zAMRrmEINpvAFvkCkRWpUW AHZYLj+QisnotX0tpbRoKXwJ7Ah1GuQu+M7UEr9v46ZELvf7/vC2Or+j4zhOdzEa 53ri32k6g/STvCP9soE0xPRP9392qZCN4u/YyKKRiT40tRRURKplsrekUg8fOq7r x41PGOZIdS3VnvPVMzTE6Y33LzFDiiRzQtnvEFXBfTXO5s6zgDPyPGkDID9sXVNu 5/GKHwWN+ex63w== -----END CERTIFICATE-----Generated at Mon Jan 26 08:43:07 2026 by rpki-client